Adobe Flash Player Memory Corruption (APSB16-04: CVE-2016-0969)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Memory Corruption (APSB16-04: CVE-2016-0967)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Integer Overflow Remote Code Execution (APSB16-04: CVE-2016-0976)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a design flaw that could lead to integer overflow. A remote attacker can exploit this vulnerability by enticing a victim to open specially crafted SWF files...

Adobe Flash Player for Mac <= 20.0.0.286 Multiple Vulnerabilities (APSB16-04)

The version of Adobe Flash Player installed on the remote Mac OS X host is prior or equal to version 20.0.0.286. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows a remote attacker to execute arbitrary code. CVE-2016-0985 - Multiple use-after-fre...

WordPress Plugin User Meta Manager 3.4.6 - Privilege Escalation

WordPress Plugin User Meta Manager 3.4.6 - Privilege Escalation Exploit Title: WordPress User Meta Manager Plugin Privilege Escalation Discovery Date: 2015/12/28 Public Disclosure Date: 2016/02/04 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage:...

WordPress Plugin User Meta Manager 3.4.6 - Privilege Escalation

Exploit Title: WordPress User Meta Manager Plugin Privilege Escalation Discovery Date: 2015/12/28 Public Disclosure Date: 2016/02/04 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://jasonlau.biz/home/ Software Link:...

Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : openssl (SSA:2015-349-04)

New openssl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2015-349-04. The text...

BookingeCMS HotelCMS酒店预订管理系统rewrite参数SQL注入

0x01 漏洞简述 提交时间： 2015-09-04 13:33 公开时间： 2015-12-06 09:00 漏洞类型： SQL注射漏洞 珠海中新信息科技有限公司开发的BookingeCMS HotelCMS /?m=info&rewrite=1 文件rewrite参数存在注入 0x02 漏洞利用 测试Payload: （get提交） ?m=info&rewrite=1' UNION ALL SELECT CONCAT0x7c,IFNULLCASTCURRENTUSER AS CHAR,0x20,0x7c,NULL%23 0x03 参考链接...

Web Reference Database and bleeding-edge cross-site scripting vulnerabilities

Web Reference Database a.k.a. refbase is a web-based multi-user interface product developed by the refbase community to provide search tools and automated indexing for the management of scientific literature. bleeding-edge is a downloadable version. A cross-site scripting vulnerability exists in...

nixon.com XSS vulnerability

Vulnerable URL: http://www.nixon.com/de/de/search/?q=asd%22%29%3Balert%28%22XSSPOSED%22%29%2f%2f Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 38740 Goog...

Gentoo Security Advisory GLSA 201309-04

Gentoo Linux Local Security Checks GLSA 201309-04 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Gentoo Security Advisory GLSA 201401-04

Gentoo Linux Local Security Checks GLSA 201401-04 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Gentoo Security Advisory GLSA 201308-04

Gentoo Linux Local Security Checks GLSA 201308-04 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Gentoo Security Advisory GLSA 201403-04

Gentoo Linux Local Security Checks GLSA 201403-04 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Gentoo Security Advisory GLSA 201312-04

Gentoo Linux Local Security Checks GLSA 201312-04 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Gentoo Security Advisory GLSA 201507-04

Gentoo Linux Local Security Checks GLSA 201507-04 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

w3tw0rk / Pitbul IRC Bot Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'w3tw0rk / Pitbul IRC Bot Remote Code Execution', 'Description' = %q This module allows remote command execution on the w3tw0rk /...

Dogma India dogmaindia CMS Authentication Bypass Vulnerability

Exploit for php platform in category web applications Document Title: =============== Dogma India dogmaindia CMS - Auth Bypass Vulnerability Product & Service Introduction: =============================== Industrial Training Centre ITCs are training Centre which provide training in technical fiel...

Adobe Flash opaqueBackground Use After Free (APSA15-04: CVE-2015-5122)

A use after free vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in the way Adobe Flash Player handles the opaqueBackground property setter of the DisplayObject class. A successful exploitation can allow a remote attacker to execute arbitrary code on a vulnerable...

Audio Gallery Suite Local File Disclosure

Exploit Title: Audio-Gallery-Suite Local File Disclosure Vulnerability + Google Dork: inurl:/downloadengine.php?file= + Date: July/04/2015 + Exploit Author: IranianDarkCodersTeam + Vendor Homepage: http://robinrizvi.info + Software Link: https://github.com/robinrizvi/Audio-Gallery-Suite +...